digit-soft/checkbox-ua-php-sdk

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the lack of ongoing source activity raises maintenance risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling security issues.

Version stabilitycaution

Version 0.3.4 is not a prerelease, but the package remains below major version 1, so its public API may still change.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection trigger, but both action references are unpinned and the audit found high-confidence template injection plus an archived action. These are release-workflow hygiene concerns rather than proof the package is unsafe.